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THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
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earned patent term adjustment. See 37 CFR 1.704(b). 
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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(a) the invention was known or used by others in this country, or patented or described in a printed publication in this 
or a foreign country, before the invention thereof by the applicant for a patent. 

2. Claims 1-17 are rejected under 35 U.S.C. 102(a) as being anticipated by AiroPeek (for 
Windows Quick Tour). 

As concerns claim 1, an IEEE 802. 1 1(b) wireless LAN, a method for accessing and analyzing 
the contents of data packets or frames transmitted along a IEEE 802.11(b) wireless communication 
channel, comprising the steps of: establishing a direct wireless logical connection with the wireless 
communications network (Quick tour; page 1); receiving wirelessly, in real-time, data packets or 
frames transmitted in the wireless communications network (page 1) for all stations or devices 
associated therewith; performing over a first period of time a detailed protocol analysis on the contents 
of the header of the data packets or frames (page 2), including analyzing associated protocol layers 
(page 14) in detail; and displaying in real time the results (page 1 1) of the analysis to a user. 

As concerns claim 2, storing in a memory storage device (inherent to have memory on the 
computer system being used for monitoring), the data packets or frames captured over a second period 
of time; and performing an offline detailed analysis (page 12; past statistics can be viewed while 
offline) on the contents of the IEEE 802. 1 1(b) header of the data packets or frames, and associated 
protocol layers, stored in the memory storage device; and displaying the results (page 12) to the user. 



Application/Control Number: 1 0/026,26 1 Page 3 

Art Unit: 2151 

As concerns claim 3, selectively turning said detailed protocol analysis on or off for a 
.particular protocol layer (page 24; set filters for specific protocols), whereby for a protocol layer 
turned off, that layer and all protocol layers above or higher than that layer are not subjected to a 
detailed protocol analysis (only layers selected may be analyzed if chosen by the user). 

As concerns claim 4, wherein the step of performing a detailed protocol analysis includes the 
step of generating alarms (page 13) for display relating to detected network and protocol errors. 

As concerns claim 5, wherein the step of performing a detailed protocol analysis further 
includes selectively turning on or off said alarm (page 13-note under alarms section) generating step. 

As concerns claim 6, wherein the step of performing a detailed protocol analysis further 
includes the steps of assigning a default severity level (page 13; user specified alarm condition, user 
specified severity) from a plurality of available severity levels for each available alarm; and selectively 
determining whether a particular alarm type is to be logged when generated (page 13; sends a 
notification of a user specified severity). 

As concerns claim 7, further including the step of selectively marking an alarm as a diagnosis 
or a symptom (page 13; user specified alarm resolution condition) dependent upon the detected 
severity level. 

As concerns claim 8, wherein said step of displaying includes the step of showing all layers 
(page 9; protocols and subprotocols) of protocols analyzed for each capture of frame or data packets. 

As concerns claim 9, wherein said step of displaying further includes the step of showing the 
total number of frames and octets analyzed (page 11; summary statistics) for a selected protocol layer. 

As concerns claim 1 0, wherein said step of displaying includes the step of showing for a 
selected protocol layer, lower layer objects linked to a current selected object (page 14; subprotocols). 
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As concerns claim 1 1, wherein said step of displaying includes the step of showing the hosts 
created for said IEEE 802. 1 l(b)wireless communication layer, and the attributes of said hosts, 
respectively (page 14; address filter). 

As concerns claim 12, further including showing detailed statistics for each selected host (page 
14; address filter). 

As concerns claim 13, further including showing attributes for each selected host, including 
MAC address (page 2; address), station function (page 14; port, tests for traffic from a port to ascertain 
functional or nonfunctional based on whether unreachable), frame types (page 2; protocol of the 
packet), channel (page 2), network types (page 4; name resolution), BSSID (page 2), and SSID (page 
21). 

As concerns claim 14, further including showing the higher layer DLC objects 0 linked to 
selected wireless layer hosts, respectively. 

As concerns claim 1 5, further including showing alarms associated with a selected host (filters 
act as an alarm or trigger for a selected hose; page 13). 

As concerns claim 16, wherein said step of detailed protocol analysis includes the steps of 
permitting a user to enter the MAC addresses of known access points (page 20-21) operating in said 
IEEE 802.1 1(b) wireless communication channel; selectively activating a rogue access point detection 
routine; checking the addresses of newly detected access points against the addresses of said known 
access points; and marking for display as a rogue access point, any access point detected that is not 
included as a known access point (pages 4-6, automatic name resolution; page 8, detect various 
internet attacks; page 10, sources of specific protocol traffic). 
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As concerns claim 17, a wireless network troubleshooting tool for monitoring an IEEE 
802. 1 1(b) LAN wireless communication network to detect and diagnose failures in said wireless 
communication network, said tool comprising: a wireless network interface device operable in a 
promiscuous mode within a wireless communications network for capturing a plurality of frames or 
data packets (page 1) transmitted through the network for all stations or devices associated therewith; a 
user interface system including input and output devices (computer inherently has input and output 
devices; i.e. keyboard, monitor) for enabling a user to input and obtain information associated with 
said plurality of captured frames; a memory storage device (inherent to have memory on the computer 
system being used for monitoring) for storing said plurality of captured frames as received from said 
wireless network interface device; and a programmable processor unit (computer for running program, 
inherently has a processor) connected to said wireless network interface device, said user interface 
system, and said memory storage device, said processor being programmed to execute a routine 
comprising the steps of establishing a direct wireless logical connection with said wireless 
communications network via the network interface device (page 1); receiving wirelessly, in real-time, 
frames transmitted in the wireless communications network via direct wireless logical connection 
(page 1); receiving from said user, via said user interface configuration parameters (page 1); 
performing, through use of said configuration parameters a detailed protocol analysis on the contents 
of respective headers of the captured data packets or frames (page 1), including associated protocol 
layers (page 14), respectively; and displaying the results of the analysis to the user in real-time (page 

ii). 
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Conclusion 



3. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure. 



examiner should be directed to John B. Walsh whose telephone number is 571-272-7063. The 
examiner can normally be reached on Monday- Friday from 6:30-4:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Zarni Maung can be reached on 571-272-3939. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



4. 



Any inquiry concerning this communication or earlier communications from the 




Whn B. Walsh 
Primary Examiner 
Art Unit 2151 



